(1) The governing board shall:
(a) recommend changes to the state data privacy policy;
(b) hear issues raised by the ombudsperson regarding existing governmental entity privacy practices;
(c) evaluate and recommend the appropriate:
(i) structure and placement for the office within state government; and
(ii) authority to be granted to the office, including any authority to make rules; and
(d) recommend funding mechanisms and strategies for governmental entities to enable compliance with data privacy responsibilities, including:
(i) appropriations;
(ii) rates;
(iii) grants; and
(iv) internal service funds.
(2) In fulfilling the duties under this part, the governing board may receive and request input from:
(a) governmental entities;
(b) elected officials;
(c) subject matter experts; and
(d) other stakeholders.